Retrieve OIDC tokens

Retrieves OpenID Connect (OIDC) tokens for User authentication.

Authorization

apikey<token>

Tenant API Key for authentication

In: query

Path Parameters

OIDCAppName*string

OIDC App Name

Request Body

TypeScript Definitions

Use the request body type in TypeScript.

client_id*string

client_secret*string

code*string

grant_type*string

Default"authorization_code"

redirect_uri*string

response_type?string

Default"token"

client_id*string

code*string

code_verifier*string

grant_type*string

Default"authorization_code"

redirect_uri*string

response_type?string

Default"token"

client_id*string

client_secret*string

grant_type*string

Default"refresh_token"

response_type?string

Default"token"

token*string

client_id*string

client_secret*string

grant_type*string

Default"password"

password*string

response_type?string

Default"token"

scope?string

username*string

client_id*string

device_code*string

grant_type*string

Default"urn:ietf:params:oauth:grant-type:device_code"

response_type?string

Default"token"

scope?string

client_id*string

client_secret*string

grant_type*string

Default"http://loginradius.com/oauth/grant-type/exchange_token"

response_type?string

Default"token"

scope?string

token*string

Response Body

`application/json`

curl -X POST "https://TenantName.hub.loginradius.com/api/oidc/example_oidc_app/token" \  -H "Content-Type: application/json" \  -d '{    "client_id": "68106262-3938-4435-87ed-3e410b360209",    "client_secret": "AQvsBHrjOYFNJdvndATLBPoavRZUp1fj4656",    "code": "ab261e646022e92c620e2be8c10469d...",    "grant_type": "authorization_code",    "redirect_uri": "https://example.com/callback"  }'

{
  "access_token": "eyJhbGciOiJIUz...",
  "expire_in": "3600",
  "id_token": "id_token",
  "refresh_token": "3976a9391e31d3c1cf854c83f9f65078:90f...",
  "token_type": "Bearer"
}

{
  "error": "invalid_grant",
  "error_description": "The access_token is not valid."
}

{
  "error": "invalid_client",
  "error_description": "The client_id is not valid, check your client_id again."
}

{
  "error": "unauthorized_client",
  "error_description": "The client_secret is not valid, check your client_secret again."
}

Retrieve OIDC tokens

Authorization

Path Parameters

Request Body

Response Body

200application/json

400application/json

401application/json

403application/json

Example ACCESS_TOKEN_INVALID

Example ACCESS_TOKEN_INVALID_OR_EXPIRED_SSO

Example CLIENT_ID_REQUIRED

Example CLIENT_SECRET_BASIC_REQUIRED

Example CLIENT_SECRET_POST_REQUIRED

Example CLIENT_SECRET_REQUIRED

Example CODE_EXPIRED

Example CODE_INVALID

Example CODE_INVALID_OR_EXPIRED

Example CODE_IS_ALREADY_USED

Example CODE_REQUIRED

Example CODE_VERIFIER_INVALID

Example CODE_VERIFIER_REQUIRED

Example CONTENT_TYPE_NOT_SUPPORTED

Example DEVICE_AUTHORIZATION_PENDING

Example DEVICE_CODE_INVALID

Example DEVICE_CODE_REQUIRED

Example DEVICE_SLOW_DOWN

Example GRANT_TYPE_INVALID

Example GRANT_TYPE_REQUIRED

Example OAUTH_ACCESS_DENIED

Example OAUTH_ACCESS_TOKEN_EXPIRED

Example OAUTH_ACCOUNT_NOT_ALLOWED_TO_LOGIN

Example OAUTH_ACTIVE_SESSIONS_EXCEEDED

Example OAUTH_APP_NOT_EXISTS

Example OAUTH_APP_RESTRICTED

Example OAUTH_BREACHED_PASSWORD_LOGIN

Example OAUTH_CAPTCHA_NOT_VALID

Example OAUTH_CHANGE_BREACHED_PASSWORD

Example OAUTH_CONSENT_FORM_NOT_SUBMITTED

Example OAUTH_CONSENT_FORM_VALIDATION_FAILED

Example OAUTH_DANGEROUS_REQUEST

Example OAUTH_EMAIL_NOT_VERIFIED

Example OAUTH_EMAIL_SEND_LIMIT_REACHED

Example OAUTH_EMAILID_ID_FORMAT_NOT_VALID

Example OAUTH_EMAIl_OR_PHONE_NUMBER_REQUIRED_VERIFIED

Example OAUTH_HOST_NOT_WHITELISTED

Example OAUTH_INVALID_PHONE_NUMBER

Example OAUTH_LOGIN_DISABLED

Example OAUTH_LOGIN_IS_LOCKED_FOR_RECAPTCHA

Example OAUTH_LOGIN_IS_LOCKED_FOR_SECURITY_QUESTION

Example OAUTH_LOGIN_WITH_PASSWORD_NOT_ENABLED

Example OAUTH_OPERATION_FAILED

Example OAUTH_OTP_SEND_FAILED

Example OAUTH_PHONE_NO_LOGIN_NOT_ENABLED

Example OAUTH_PHONE_NOT_VERIFIED

Example OAUTH_PIN_IS_REQUIRED

Example OAUTH_POST_BODY_INVALID

Example OAUTH_PRIVACY_POLICY_MISMATCHED

Example OAUTH_RBA_ACCOUNT_IS_BLOCKED

Example OAUTH_RBA_EMAIL_VERIFICATION

Example OAUTH_RBA_SECURITY_ANSWER_VERIFICATION

Example OAUTH_RBA_SMS_VERIFICATION

Example OAUTH_SMS_CONFIGURATION_NOT_EXISTS

Example OAUTH_SMS_SEND_LIMIT_REACHED

Example OAUTH_TRIAL_PLAN_EXPIRED

Example OAUTH_USER_ID_BLOCKED

Example OAUTH_USER_ID_LOCKED_SSO

Example OAUTH_USER_NAME_AUTHENTICATION_ENABLED_SSO

Example OAUTH_USER_NOT_EXISTS_SSO

Example OAUTH_USERNAME_OR_PASSWORD_WRONG

Example OAUTH_USERNAME_OR_PASSWORD_WRONG_FOR_BLOCK_LOCKOUT

Example OAUTH_USERNAME_OR_PASSWORD_WRONG_FOR_SUSPEND_LOCKOUT

Example PASSWORD_REQUIRED

Example REDIRECT_URI_INVALID

Example REDIRECT_URI_REQUIRED

Example REFRESH_TOKEN_INVALID_SSO

Example REFRESH_TOKEN_REQUIRED_SSO

Example RESPONSE_TYPE_INVALID

Example SCOPE_INVALID

Example TOKEN_REQUIRED

`application/json`

`application/json`

`application/json`

`application/json`